Active Directory Tools and Utilities

I'm curious if you guys know of any additional tools or utilities that can be used to manage the compliance of objects within Active Directory.  Presently, we are using an ADMS solution that does a lot of this, but would like to know if there are any other types of utilities that we could use that might compliment it.  Anything cool you know of or helpful suggestions will be greatly appreciated.
itsmevicAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Shabarinath RamadasanInfrastructure ArchitectCommented:
If you are looking into forensic perspective, try Quest Active Server roles. Its costly but still, will give a detailed logging. Who did what change on which object on which attribute from which computer..

Good luck
Shaba
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Mike KlineCommented:
In addition to the Quest product, NetIQ makes DRA which is decent.  Script logic also makes some nice tools  http://www.scriptlogic.com/products/activeadmin/

Test any of these out first, not cheap.

thanks

Mike
0
CynepMeHCommented:
Script logic is now owned by Quest, I would imagine they'd go the same route they did with NetPro - merge technologies, kill off the product line/re-brand everything. Active Roles Server and Active Roles for Exchange is perhaps one of the best suites out there for everything related - you can manage multiple forests, domains, set workflow, set policies (outside or on top of GPO), see "trustee" sort of list or see what resources user has access to... and best of all - you can provision/deprovision in multiple environments. Throw in a capability to do thorough reporting for every action plus a capability to do full-blown RBAC and you got yourself a pretty sweet package that is significantly more user friendly than ForeFront IDM/ILM/MIIS
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

itsmevicAuthor Commented:
Just curious what you guys think about this software?  Would it be worthwhile?  Presently, I'm using NETIQ DRA but looking for additional complimenting tools or utilities.   http://www.gfi.com/eventsmanager/esmforensics.htm
0
Mike KlineCommented:
gfi is a good one that is well known (haven't used it myself).  TNT is also worth checking out

http://www.tntsoftware.com/eventlogproducts/eventlogmonitoring/eventlogmonitor.aspx

Thanks

Mike
0
itsmevicAuthor Commented:
Good stuff, thank you!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.